$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft File: hXm-LYNFaC8nrucGK71O92ZOVxs.mft (raw, json) Hash identifier: RkFPcnm7Vg6Cb7Lr9QvFOVAKTCiFa9RraXCavhlYyk4= Subject key identifier: 74:7B:2E:FA:8D:87:B1:E5:DB:16:02:8D:37:71:74:31:43:A1:D1:63 Authority key identifier: 85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B Certificate issuer: /CN=A91D0B6B/serialNumber=8579BE2D8345682F27AEE7062BBD4EF7664E571B Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft Manifest number: 0E Signing time: Thu 03 Apr 2025 07:21:51 +0000 Manifest this update: Thu 03 Apr 2025 07:21:50 +0000 Manifest next update: Thu 10 Apr 2025 07:21:50 +0000 Files and hashes: 1: hXm-LYNFaC8nrucGK71O92ZOVxs.crl (hash: adfuvqaABZFiddB2+WU1pFbTaCY69wCDlU6TuYl6+ds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B6B Validity Not Before: Apr 3 07:21:50 2025 GMT Not After : Apr 10 07:21:50 2025 GMT Subject: CN=67ee370e-12fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:54:a9:09:3b:45:e4:d4:88:21:24:a3:96:9b: 46:b2:7e:5b:80:41:41:04:eb:e0:d4:ac:00:4c:dc: 2d:d0:3d:fc:26:20:e8:df:cb:e1:04:d8:6c:d6:58: 1a:dc:77:79:86:f9:82:ed:d3:7f:67:e0:3b:cb:78: 60:cc:65:96:96:f0:ea:44:0a:f1:78:30:2c:29:7f: a1:ab:ac:f3:fb:f2:f1:1a:f4:b6:0c:47:9c:99:e1: 89:d4:41:d9:e9:8d:9a:7b:cf:af:39:56:f6:bb:8b: ee:ed:ea:30:5a:98:fe:27:bc:2d:56:02:00:fe:be: fa:1e:a3:87:12:7a:dd:bc:b0:ab:b1:87:42:1d:80: 7a:e5:e1:38:a3:e0:6c:81:fd:2b:c1:40:af:d0:a6: 84:5e:0d:8b:79:83:a3:5a:06:05:62:a6:08:a3:30: c3:f5:65:e0:7c:84:52:ce:7b:a7:4f:05:93:fe:46: 4b:0d:0a:e9:dc:85:20:d7:83:a3:71:dc:dc:3e:9a: e6:9b:25:85:32:73:67:ca:5e:f4:83:3a:1d:ee:ad: fc:bc:b8:4d:6f:14:6b:fd:d3:c8:e3:8b:92:5e:e1: f6:d9:4b:3a:3b:ee:c5:56:37:15:a0:b2:7a:a0:36: 13:6b:18:13:ea:3d:1b:e5:a5:7d:58:3d:7e:d8:01: 4f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7B:2E:FA:8D:87:B1:E5:DB:16:02:8D:37:71:74:31:43:A1:D1:63 X509v3 Authority Key Identifier: keyid:85:79:BE:2D:83:45:68:2F:27:AE:E7:06:2B:BD:4E:F7:66:4E:57:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXm-LYNFaC8nrucGK71O92ZOVxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B6B/7EC0076CFE3F11EF8FA27752C4F9AE02/hXm-LYNFaC8nrucGK71O92ZOVxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d0:b9:c0:c1:56:7b:9b:ae:8c:47:ed:d5:d2:d0:20:57:3d:f5: 26:10:41:46:dd:d0:d1:07:23:1a:e8:38:bb:f9:73:99:bb:6c: 23:2f:89:6a:aa:8e:c6:1b:18:c3:55:6f:7a:1c:76:d0:ba:43: d0:1c:6b:aa:7a:cd:06:a5:80:dd:63:71:d9:b9:d9:c6:de:96: 74:0c:f0:3c:13:32:81:04:56:14:5b:ec:5e:b5:c0:82:38:02: f8:0a:02:aa:ee:bf:6e:54:58:84:9c:78:8a:12:d6:ea:b4:b5: bc:64:3c:8f:de:44:9b:fb:0c:7d:69:cf:cb:ec:e4:a3:b1:65: a6:ee:8f:f6:93:51:78:fa:1c:62:48:e0:3b:7e:96:29:5c:1d: 21:9c:29:42:04:d0:d7:0a:1f:d2:8b:6d:b8:31:a6:8f:63:0a: de:b6:34:b4:5a:a4:28:64:ba:c1:79:67:d8:6b:a4:92:c2:e0: 15:f8:6d:c7:37:b7:28:41:87:6a:e7:11:e8:da:46:f6:7b:01: a7:17:01:10:be:74:6b:40:20:ad:a0:2e:d2:23:84:fa:93:64: 43:bb:33:50:55:38:6b:3e:6e:dd:63:0c:b6:9f:69:ad:fb:23: dd:ce:f3:cd:b6:f2:67:b2:c6:33:60:1e:47:03:e7:ed:5d:33: bd:2f:5d:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEI2QjExMC8GA1UEBRMoODU3OUJFMkQ4MzQ1NjgyRjI3QUVFNzA2MkJCRDRFRjc2 NjRFNTcxQjAeFw0yNTA0MDMwNzIxNTBaFw0yNTA0MTAwNzIxNTBaMBgxFjAUBgNV BAMTDTY3ZWUzNzBlLTEyZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIVKkJO0Xk1IghJKOWm0ayfluAQUEE6+DUrABM3C3QPfwmIOjfy+EE2GzWWBrc d3mG+YLt039n4DvLeGDMZZaW8OpECvF4MCwpf6GrrPP78vEa9LYMR5yZ4YnUQdnp jZp7z685Vva7i+7t6jBamP4nvC1WAgD+vvoeo4cSet28sKuxh0IdgHrl4Tij4GyB /SvBQK/QpoReDYt5g6NaBgVipgijMMP1ZeB8hFLOe6dPBZP+RksNCunchSDXg6Nx 3Nw+muabJYUyc2fKXvSDOh3urfy8uE1vFGv908jji5Je4fbZSzo77sVWNxWgsnqg NhNrGBPqPRvlpX1YPX7YAU83AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdHsu+o2H seXbFgKNN3F0MUOh0WMwHwYDVR0jBBgwFoAUhXm+LYNFaC8nrucGK71O92ZOVxsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwQjZCLzdFQzAwNzZDRkUz RjExRUY4RkEyNzc1MkM0RjlBRTAyL2hYbS1MWU5GYUM4bnJ1Y0dLNzFPOTJaT1Z4 cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaFhtLUxZTkZhQzhucnVjR0s3MU85MlpPVnhzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw QjZCLzdFQzAwNzZDRkUzRjExRUY4RkEyNzc1MkM0RjlBRTAyL2hYbS1MWU5GYUM4 bnJ1Y0dLNzFPOTJaT1Z4cy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANC5wMFWe5uujEft1dLQIFc99SYQQUbd0NEHIxroOLv5c5m7bCMviWqq jsYbGMNVb3ocdtC6Q9Aca6p6zQalgN1jcdm52cbelnQM8DwTMoEEVhRb7F61wII4 AvgKAqruv25UWISceIoS1uq0tbxkPI/eRJv7DH1pz8vs5KOxZabuj/aTUXj6HGJI 4Dt+lilcHSGcKUIE0NcKH9KLbbgxpo9jCt62NLRapChkusF5Z9hrpJLC4BX4bcc3 tyhBh2rnEejaRvZ7AacXARC+dGtAIK2gLtIjhPqTZEO7M1BVOGs+bt1jDLafaa37 I93O88228meyxjNgHkcD5+1dM70vXb8= -----END CERTIFICATE-----Generated at Fri Apr 4 22:22:12 2025 by rpki-client